@geekmidas/cli 10.0.0-alpha.64 → 10.0.0-alpha.66

package/dist/deploy/public.d.cts

@@ -1,10 +1,11 @@
-import { $ as DeployEventError, Q as DeployEvent, at as DeployResult, bt as DeployIdentity, ct as CredentialKind, dt as CredentialRequest, et as DeployEventType, ft as MissingCredential, gt as StateLocked, ht as storedCredentials, it as AppDeployResult, lt as CredentialKinds, mt as chainCredentials, nt as ResourceChange, ot as AwsCredential, pt as StoredCredentialsOptions, rt as ResourceVia, st as Credential, tt as DeployPhase, ut as CredentialProvider, vt as StateVersionConflict, xt as deployIdentity, z as AnyDeployTarget } from "../types-DkrDOMxw.cjs";
+import { $ as DeployEventError, Q as DeployEvent, St as deployIdentity, at as DeployResult, ct as CredentialKind, dt as CredentialRequest, et as DeployEventType, ft as MissingCredential, gt as StateLocked, ht as storedCredentials, it as AppDeployResult, lt as CredentialKinds, mt as chainCredentials, nt as ResourceChange, ot as AwsCredential, pt as StoredCredentialsOptions, rt as ResourceVia, st as Credential, tt as DeployPhase, ut as CredentialProvider, vt as StateVersionConflict, xt as DeployIdentity, yt as ReleasedImage, z as AnyDeployTarget } from "../types-D5WIxRDP.cjs";
 import { a as SandboxOutput, c as confineCwd, i as SandboxExecOptions, n as Sandbox, o as SandboxResult, r as SandboxCwdEscape, s as SecretNameInvalid, t as SECRETS_DIR_ENV } from "../sandbox-M8UnLhXE.cjs";
-import { i as ConfigLoadFailed, o as ConfigObjectNotSerializable } from "../config-Be-4_I6H.cjs";
+import { i as ConfigLoadFailed, o as ConfigObjectNotSerializable } from "../config-4XFxX1al.cjs";
 import { n as ConstructsNotSerializable, t as ConstructDiscoveryFailed } from "../discover-B_IkPukx.cjs";
-import { a as TargetRuntimeMismatch, c as DeployTargetNotYetSupported, i as TargetPackageInvalid, l as UnknownDeployTarget, n as InvalidTargetOptions, o as ProviderRemoved, r as TargetEntryInvalid, s as TargetPackageNotFound, t as TargetRuntimeUndeclared } from "../runtime-Cjq1jlVX.cjs";
-import { ConstructManifest } from "@geekmidas/manifest";
+import { a as TargetRuntimeMismatch, c as DeployTargetNotYetSupported, i as TargetPackageInvalid, l as UnknownDeployTarget, n as InvalidTargetOptions, o as ProviderRemoved, r as TargetEntryInvalid, s as TargetPackageNotFound, t as TargetRuntimeUndeclared } from "../runtime-BRqFOvPM.cjs";
+import { ConstructManifest, Declaration } from "@geekmidas/manifest";
 import "@geekmidas/envkit/sniffer";
+import "@geekmidas/db/pg/roles";
 //#region src/home.d.ts
 /**
  * Where the CLI keeps what belongs to a person rather than a project: stage
@@ -189,6 +190,130 @@ export declare class SandboxWorkerFailed extends Error {
   constructor(step: string, exitCode: number | null, stderr: string);
 }
 //#endregion
+//#region src/target/dokploy/dokploy-api.d.ts
+/** A deployment Dokploy ran and reported as failed. */
+export declare class DeploymentFailed extends Error {
+  readonly applicationId: string;
+  readonly deployment: DokployDeployment;
+  constructor(applicationId: string, deployment: DokployDeployment);
+}
+/** A deployment that had not finished when the deploy stopped waiting. */
+export declare class DeploymentTimedOut extends Error {
+  readonly applicationId: string;
+  readonly timeoutMs: number;
+  /** The last status seen, if a deployment had appeared at all. */
+  readonly lastStatus: DokployDeploymentStatus | undefined;
+  constructor(applicationId: string, timeoutMs: number,
+  /** The last status seen, if a deployment had appeared at all. */
+  lastStatus: DokployDeploymentStatus | undefined);
+}
+type DokployDeploymentStatus = 'running' | 'done' | 'error' | 'cancelled';
+/** One run of `application.deploy`, as `deployment.all` lists it. */
+interface DokployDeployment {
+  deploymentId: string;
+  status: DokployDeploymentStatus;
+  /** ISO timestamp, by Dokploy's clock. */
+  createdAt: string;
+  title?: string;
+  errorMessage?: string | null;
+}
+//#endregion
+//#region src/target/dokploy/engine.d.ts
+/** A backend failed, so the run stopped before deploying anything after it. */
+export declare class BackendDeployFailed extends Error {
+  readonly app: string;
+  constructor(app: string, cause: unknown);
+}
+/**
+ * Sites failed to release or to answer. Every site is attempted before this
+ * is thrown, so one broken site does not keep the others back — but the run
+ * fails, and what failed is rolled back.
+ */
+export declare class FrontendDeployFailed extends Error {
+  readonly apps: readonly string[];
+  constructor(apps: readonly string[], cause: unknown);
+}
+/** An app's environment needs values the stage does not have. */
+export declare class MissingEnvVars extends Error {
+  readonly app: string;
+  readonly missing: readonly string[];
+  readonly stage: string;
+  constructor(app: string, missing: readonly string[], stage: string);
+}
+//#endregion
+//#region src/target/dokploy/health.d.ts
+/** An app never answered healthy enough times in a row. */
+export declare class HealthCheckTimedOut extends Error {
+  readonly app: string;
+  readonly url: string;
+  readonly timeoutMs: number;
+  /** The last answer's status, or undefined when the last request failed. */
+  readonly lastStatus: number | undefined;
+  constructor(app: string, url: string, timeoutMs: number,
+  /** The last answer's status, or undefined when the last request failed. */
+  lastStatus: number | undefined);
+}
+//#endregion
+//#region src/target/dokploy/migrations.d.ts
+/** The migrations of a deployed stage failed; the release stopped before any app. */
+export declare class DeployMigrationsFailed extends Error {
+  readonly stage: string;
+  /** The failure's class name in the sandbox — `MigrationFailed`, … */
+  readonly reason: string;
+  constructor(stage: string,
+  /** The failure's class name in the sandbox — `MigrationFailed`, … */
+  reason: string, message: string);
+}
+//#endregion
+//#region src/target/dokploy/rollback.d.ts
+interface RollbackInput {
+  /** The project: the directory holding `gkm.config.ts`, or one inside it. */
+  cwd: string;
+  stage: string;
+  /** The app to roll back. */
+  app?: string;
+  /** Every app with an earlier release, instead of one. */
+  atomic?: boolean;
+  /** Defaults to the environment, then the logins `gkm login` stored. */
+  credentials?: CredentialProvider;
+  signal?: AbortSignal;
+  /** Each progress line. Defaults to none. */
+  log?: (line: string) => void;
+  /** Where the config is loaded. Defaults to a `LocalSandbox` on the project. */
+  sandbox?: Sandbox;
+}
+/** One app rolled back. */
+interface RolledBack {
+  app: string;
+  from: ReleasedImage;
+  to: ReleasedImage;
+}
+/** Neither an app nor every app was asked for. */
+export declare class RollbackNeedsApp extends Error {
+  readonly stage: string;
+  /** The apps that have a release to go back to. */
+  readonly apps: readonly string[];
+  constructor(stage: string,
+  /** The apps that have a release to go back to. */
+  apps: readonly string[]);
+}
+/** An app has no release before the one it runs. */
+export declare class NothingToRollBack extends Error {
+  readonly stage: string;
+  readonly app: string;
+  constructor(stage: string, app: string);
+}
+/** The stage was never deployed through Dokploy from this state. */
+export declare class StageNeverDeployed extends Error {
+  readonly stage: string;
+  constructor(stage: string);
+}
+/**
+ * Roll a stage's app — or, `atomic`, all of them — back to its previous
+ * release, holding the stage's lock as a deploy does.
+ */
+export declare function rollbackStage(input: RollbackInput): Promise<RolledBack[]>;
+//#endregion
 //#region src/target/sst/health.d.ts
 /** Surfaces that never answered healthy. */
 export declare class SurfacesUnhealthy extends Error {
@@ -241,7 +366,10 @@ interface DeployInput {
    * directory inside it. Never assumed to be `process.cwd()`.
    */
   cwd: string;
-  /** The stage to deploy — one of the config's deployed stages. */
+  /**
+   * The stage to deploy — one of the config's deployed stages, or its local
+   * stage through a target that runs one (`compose`).
+   */
   stage: string;
   /**
    * The target to deploy through, by name. Defaults to `deploy.default`,
@@ -264,6 +392,12 @@ interface DeployInput {
    * changing Dokploy or building and pushing images.
    */
   dryRun?: boolean;
+  /**
+   * When a release or its verification fails, roll back every app the run
+   * released rather than only the ones that failed — on a target that can
+   * roll back. For apps that must move together.
+   */
+  atomic?: boolean;
   /**
    * Where credentials come from. Defaults to the environment, then the
    * logins `gkm login` stored. A credential no provider has stops the run
@@ -328,20 +462,6 @@ interface DeployRun extends AsyncIterable<DeployEvent> {
  */
 export declare function deploy(input: DeployInput): DeployRun;
 //#endregion
-//#region src/deploy/index.d.ts
-/** A backend failed, so the run stopped before deploying anything after it. */
-export declare class BackendDeployFailed extends Error {
-  readonly app: string;
-  constructor(app: string, cause: unknown);
-}
-/** An app's environment needs values the stage does not have. */
-export declare class MissingEnvVars extends Error {
-  readonly app: string;
-  readonly missing: readonly string[];
-  readonly stage: string;
-  constructor(app: string, missing: readonly string[], stage: string);
-}
-//#endregion
 //#region src/deploy/orchestrate.d.ts
 /** Apps were asked for by name that the workspace does not have. */
 export declare class UnknownDeployApps extends Error {
@@ -399,5 +519,5 @@ export declare class RegistryAmbiguous extends Error {
   constructor(registry: string, registryIds: readonly string[]);
 }
 //#endregion
-export { type AppDeployResult, type AwsCredential, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, type Credential, type CredentialKind, type CredentialKinds, type CredentialProvider, type CredentialRequest, type DeployEvent, type DeployEventError, type DeployEventType, type DeployIdentity, type DeployInput, type DeployLogger, type DeployPhase, type DeployResult, type DeployRun, DeployTargetNotYetSupported, type InstallOptions, InvalidTargetOptions, type LocalSandboxOptions, MissingCredential, ProviderRemoved, type ResourceChange, type ResourceVia, SECRETS_DIR_ENV, type Sandbox, SandboxCwdEscape, type SandboxExecOptions, type SandboxOutput, type SandboxResult, SecretNameInvalid, StateLocked, StateVersionConflict, type StoredCredentialsOptions, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployTarget, chainCredentials, confineCwd, deployIdentity, storedCredentials };
+export { type AppDeployResult, type AwsCredential, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, type Credential, type CredentialKind, type CredentialKinds, type CredentialProvider, type CredentialRequest, type DeployEvent, type DeployEventError, type DeployEventType, type DeployIdentity, type DeployInput, type DeployLogger, type DeployPhase, type DeployResult, type DeployRun, DeployTargetNotYetSupported, type InstallOptions, InvalidTargetOptions, type LocalSandboxOptions, MissingCredential, ProviderRemoved, type ResourceChange, type ResourceVia, type RollbackInput, type RolledBack, SECRETS_DIR_ENV, type Sandbox, SandboxCwdEscape, type SandboxExecOptions, type SandboxOutput, type SandboxResult, SecretNameInvalid, StateLocked, StateVersionConflict, type StoredCredentialsOptions, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployTarget, chainCredentials, confineCwd, deployIdentity, storedCredentials };
 //# sourceMappingURL=public.d.cts.map

package/dist/deploy/public.d.cts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.cts","names":[],"sources":["../../src/home.ts","../../src/run.ts","../../src/sandbox/env.ts","../../src/docker/templates.ts","../../src/sandbox/install.ts","../../src/sandbox/local.ts","../../src/sandbox/worker.ts","../../src/target/sst/health.ts","../../src/target/sst/outputs.ts","../../src/target/sst/index.ts","../../src/deploy/deploy.ts","../../src/deploy/index.ts","../../src/deploy/orchestrate.ts","../../src/deploy/ownership.ts","../../src/deploy/registry.ts"],"mappings":";;;;;;;;;;;;;;;;;qBAaa;;wBAGG,QAAQ,MAAK,OAAO;;;;qBCuBvB,sBAAsB;WAExB;WACA;WACA;WACA,QAAQ,OAAO;EAJzB,YACU,iBACA,yBACA,yBACA,QAAQ,OAAO;;;qBAUb,wBAAwB;WAE1B;WACA;WACA;EAHV,YACU,iBACA,yBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBC3BE,0CAA0C;;;;;wBAyDvC,eACf,SAAQ,OAAO,YACf,4BACE;;;KCvFS;;;;qBCeC;UAEI;;EAEhB;;EAEA,iBAAiB;;;;;;;EAOjB;;;;;EAKA;;EAEA,MAAM,SAAS;;EAEf;;EAEA,SAAS;EACT,SAAS;;;qBAIG,oCAAoC;WAC3B;EAArB,YAAqB;;;qBAWT,2CAA2C;WAE7C;WACA;EAFV,YACU,wBACA;;;;;;;;;;;;;;;;;;;;wBAqJW,oBACrB,SAAS,SACT,UAAS,iBACP,QAAQ;;;UCpMM;;EAEhB;;;;;;;;;EASA;;;;;EAKA;;EAEA,UAAU,OAAO;;;;;;;;;;;;;;;;;qBA0BL,wBAAwB;WAC3B;WACA;WACA,KAAK,SAAS;EAEvB,YAAY,SAAS;EAUf,KACL,iBACA,yBACA,SAAS,qBACP,QAAQ;;;;;qBCpBC,4BAA4B;WAE9B;WACA;WACA;EAHV,YACU,cACA,yBACA;;;;;qBC1CE,0BAA0B;WAE5B;;WAEA;IACR;IACA;IACA;IACA;;EAPF,YACU,eAEA;;EAAA;IACR;IACA;IACA;IACA;;;;;;qBCZU,6BAA6B;WAE/B;WACA;EAFV,YACU,cACA;;;;;qBC2BE,0BAA0B;WACjB;EAArB,YAAqB;;;;;;;;UCpBL;EAChB,KAAK;EACL,KAAK;EACL,OAAO;;UAGS;;;;;EAKhB;;EAEA;;;;;EAKA;;;;;;EAMA,UAAU,eAAe;;EAEzB;;EAEA;;;;;;EAMA;;;;;;EAMA,cAAc;;EAEd,SAAS;;;;;;EAMT,SAAS;;;;;EAKT;;;;;EAKA;;;;;;;;;;;;EAYA,UAAU;;;UAIM,kBAAkB,cAAc;;;;;;WAMvC,QAAQ,QAAQ;;;;;;;;;;;;;;;;;;wBAqEV,OAAO,OAAO,cAAc;;;;qBCuU/B,4BAA4B;WAE9B;EADV,YACU,aACT;;;qBAWW,uBAAuB;WAEzB;WACA;WACA;EAHV,YACU,aACA,4BACA;;;;;qBCvcE,0BAA0B;WAE5B;WACA;EAFV,YACU,yBACA;;;qBAWE,yBAAyB;WAE3B;WACA;EAFV,YACU,eACA;;;qBAUE,uBAAuB;WAEzB;;WAEA;EAHV,YACU,gBAEA;;EAAA,kBACT;;;;;;;;qBC1EW,wBAAwB;WAE1B;WACA;WACA;;WAEA;EALV,YACU,qBACA,mBACA,kBAEA;;EAAA;;;;;qBChBE,8BAA8B;WACrB;EAArB,YAAqB;;;qBAUT,yBAAyB;WAChB;EAArB,YAAqB;;;qBAUT,0BAA0B;WAE5B;WACA;EAFV,YACU,kBACA"}
+{"version":3,"file":"public.d.cts","names":[],"sources":["../../src/home.ts","../../src/run.ts","../../src/sandbox/env.ts","../../src/docker/templates.ts","../../src/sandbox/install.ts","../../src/sandbox/local.ts","../../src/sandbox/worker.ts","../../src/target/dokploy/dokploy-api.ts","../../src/target/dokploy/engine.ts","../../src/target/dokploy/health.ts","../../src/target/dokploy/migrations.ts","../../src/target/dokploy/rollback.ts","../../src/target/sst/health.ts","../../src/target/sst/outputs.ts","../../src/target/sst/index.ts","../../src/deploy/deploy.ts","../../src/deploy/orchestrate.ts","../../src/deploy/ownership.ts","../../src/deploy/registry.ts"],"mappings":";;;;;;;;;;;;;;;;;;qBAaa;;wBAGG,QAAQ,MAAK,OAAO;;;;qBCuBvB,sBAAsB;WAExB;WACA;WACA;WACA,QAAQ,OAAO;EAJzB,YACU,iBACA,yBACA,yBACA,QAAQ,OAAO;;;qBAUb,wBAAwB;WAE1B;WACA;WACA;EAHV,YACU,iBACA,yBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBC3BE,0CAA0C;;;;;wBAyDvC,eACf,SAAQ,OAAO,YACf,4BACE;;;KCvFS;;;;qBCeC;UAEI;;EAEhB;;EAEA,iBAAiB;;;;;;;EAOjB;;;;;EAKA;;EAEA,MAAM,SAAS;;EAEf;;EAEA,SAAS;EACT,SAAS;;;qBAIG,oCAAoC;WAC3B;EAArB,YAAqB;;;qBAWT,2CAA2C;WAE7C;WACA;EAFV,YACU,wBACA;;;;;;;;;;;;;;;;;;;;wBAqJW,oBACrB,SAAS,SACT,UAAS,iBACP,QAAQ;;;UCpMM;;EAEhB;;;;;;;;;EASA;;;;;EAKA;;EAEA,UAAU,OAAO;;;;;;;;;;;;;;;;;qBA0BL,wBAAwB;WAC3B;WACA;WACA,KAAK,SAAS;EAEvB,YAAY,SAAS;EAUf,KACL,iBACA,yBACA,SAAS,qBACP,QAAQ;;;;;qBCpBC,4BAA4B;WAE9B;WACA;WACA;EAHV,YACU,cACA,yBACA;;;;;qBCqBE,yBAAyB;WAE3B;WACA,YAAY;EAFtB,YACU,uBACA,YAAY;;;qBAYV,2BAA2B;WAE7B;WACA;;WAEA,YAAY;EAJtB,YACU,uBACA,mBAEA;;EAAA,YAAY;;KA0vCX;;UAOK;EAChB;EACA,QAAQ;;EAER;EACA;EACA;;;;;qBCtqCY,4BAA4B;WAE9B;EADV,YACU,aACT;;;;;;;qBAeW,6BAA6B;WAE/B;EADV,YACU,yBACT;;;qBAWW,uBAAuB;WAEzB;WACA;WACA;EAHV,YACU,aACA,4BACA;;;;;qBChNE,4BAA4B;WAE9B;WACA;WACA;;WAEA;EALV,YACU,aACA,aACA,mBAEA;;EAAA;;;;;qBCLE,+BAA+B;WAEjC;;WAEA;EAHV,YACU,eAEA;;EAAA,gBACT;;;;UCJe;;EAEhB;EACA;;EAEA;;EAEA;;EAEA,cAAc;EACd,SAAS;;EAET,OAAO;;EAEP,UAAU;;;UAIM;EAChB;EACA,MAAM;EACN,IAAI;;;qBAIQ,yBAAyB;WAE3B;;WAEA;EAHV,YACU,eAEA;;EAAA;;;qBAWE,0BAA0B;WAE5B;WACA;EAFV,YACU,eACA;;;qBAWE,2BAA2B;WAClB;EAArB,YAAqB;;;;;;wBAaA,cACrB,OAAO,gBACL,QAAQ;;;;qBChFE,0BAA0B;WAE5B;;WAEA;IACR;IACA;IACA;IACA;;EAPF,YACU,eAEA;;EAAA;IACR;IACA;IACA;IACA;;;;;;qBCZU,6BAA6B;WAE/B;WACA;EAFV,YACU,cACA;;;;;qBC2BE,0BAA0B;WACjB;EAArB,YAAqB;;;;;;;;UCrBL;EAChB,KAAK;EACL,KAAK;EACL,OAAO;;UAGS;;;;;EAKhB;;;;;EAKA;;;;;EAKA;;;;;;EAMA,UAAU,eAAe;;EAEzB;;EAEA;;;;;;EAMA;;;;;;EAMA;;;;;;EAMA,cAAc;;EAEd,SAAS;;;;;;EAMT,SAAS;;;;;EAKT;;;;;EAKA;;;;;;;;;;;;EAYA,UAAU;;;UAIM,kBAAkB,cAAc;;;;;;WAMvC,QAAQ,QAAQ;;;;;;;;;;;;;;;;;;wBAqEV,OAAO,OAAO,cAAc;;;;qBCnH/B,0BAA0B;WAE5B;WACA;EAFV,YACU,yBACA;;;qBAWE,yBAAyB;WAE3B;WACA;EAFV,YACU,eACA;;;qBAUE,uBAAuB;WAEzB;;WAEA;EAHV,YACU,gBAEA;;EAAA,kBACT;;;;;;;;qBC7EW,wBAAwB;WAE1B;WACA;WACA;;WAEA;EALV,YACU,qBACA,mBACA,kBAEA;;EAAA;;;;;qBChBE,8BAA8B;WACrB;EAArB,YAAqB;;;qBAUT,yBAAyB;WAChB;EAArB,YAAqB;;;qBAUT,0BAA0B;WAE5B;WACA;EAFV,YACU,kBACA"}

package/dist/deploy/public.d.mts

@@ -1,9 +1,10 @@
 import { a as SandboxOutput, c as confineCwd, i as SandboxExecOptions, n as Sandbox, o as SandboxResult, r as SandboxCwdEscape, s as SecretNameInvalid, t as SECRETS_DIR_ENV } from "../sandbox-M8UnLhXE.mjs";
-import { $ as DeployEventError, Q as DeployEvent, at as DeployResult, bt as DeployIdentity, ct as CredentialKind, dt as CredentialRequest, et as DeployEventType, ft as MissingCredential, gt as StateLocked, ht as storedCredentials, it as AppDeployResult, lt as CredentialKinds, mt as chainCredentials, nt as ResourceChange, ot as AwsCredential, pt as StoredCredentialsOptions, rt as ResourceVia, st as Credential, tt as DeployPhase, ut as CredentialProvider, vt as StateVersionConflict, xt as deployIdentity, z as AnyDeployTarget } from "../types-B_bEQvb9.mjs";
-import { i as ConfigLoadFailed, o as ConfigObjectNotSerializable } from "../config-DqNRiQOp.mjs";
+import { $ as DeployEventError, Q as DeployEvent, St as deployIdentity, at as DeployResult, ct as CredentialKind, dt as CredentialRequest, et as DeployEventType, ft as MissingCredential, gt as StateLocked, ht as storedCredentials, it as AppDeployResult, lt as CredentialKinds, mt as chainCredentials, nt as ResourceChange, ot as AwsCredential, pt as StoredCredentialsOptions, rt as ResourceVia, st as Credential, tt as DeployPhase, ut as CredentialProvider, vt as StateVersionConflict, xt as DeployIdentity, yt as ReleasedImage, z as AnyDeployTarget } from "../types-CSw2w69a.mjs";
+import { i as ConfigLoadFailed, o as ConfigObjectNotSerializable } from "../config-UtKzhpFb.mjs";
 import { n as ConstructsNotSerializable, t as ConstructDiscoveryFailed } from "../discover-B6yPpvRV.mjs";
-import { a as TargetRuntimeMismatch, c as DeployTargetNotYetSupported, i as TargetPackageInvalid, l as UnknownDeployTarget, n as InvalidTargetOptions, o as ProviderRemoved, r as TargetEntryInvalid, s as TargetPackageNotFound, t as TargetRuntimeUndeclared } from "../runtime-CJEYK4Gz.mjs";
-import { ConstructManifest } from "@geekmidas/manifest";
+import { a as TargetRuntimeMismatch, c as DeployTargetNotYetSupported, i as TargetPackageInvalid, l as UnknownDeployTarget, n as InvalidTargetOptions, o as ProviderRemoved, r as TargetEntryInvalid, s as TargetPackageNotFound, t as TargetRuntimeUndeclared } from "../runtime-CEk5n4VH.mjs";
+import { ConstructManifest, Declaration } from "@geekmidas/manifest";
+import "@geekmidas/db/pg/roles";
 import "@geekmidas/envkit/sniffer";
 //#region src/home.d.ts
 /**
@@ -189,6 +190,130 @@ export declare class SandboxWorkerFailed extends Error {
   constructor(step: string, exitCode: number | null, stderr: string);
 }
 //#endregion
+//#region src/target/dokploy/dokploy-api.d.ts
+/** A deployment Dokploy ran and reported as failed. */
+export declare class DeploymentFailed extends Error {
+  readonly applicationId: string;
+  readonly deployment: DokployDeployment;
+  constructor(applicationId: string, deployment: DokployDeployment);
+}
+/** A deployment that had not finished when the deploy stopped waiting. */
+export declare class DeploymentTimedOut extends Error {
+  readonly applicationId: string;
+  readonly timeoutMs: number;
+  /** The last status seen, if a deployment had appeared at all. */
+  readonly lastStatus: DokployDeploymentStatus | undefined;
+  constructor(applicationId: string, timeoutMs: number,
+  /** The last status seen, if a deployment had appeared at all. */
+  lastStatus: DokployDeploymentStatus | undefined);
+}
+type DokployDeploymentStatus = 'running' | 'done' | 'error' | 'cancelled';
+/** One run of `application.deploy`, as `deployment.all` lists it. */
+interface DokployDeployment {
+  deploymentId: string;
+  status: DokployDeploymentStatus;
+  /** ISO timestamp, by Dokploy's clock. */
+  createdAt: string;
+  title?: string;
+  errorMessage?: string | null;
+}
+//#endregion
+//#region src/target/dokploy/engine.d.ts
+/** A backend failed, so the run stopped before deploying anything after it. */
+export declare class BackendDeployFailed extends Error {
+  readonly app: string;
+  constructor(app: string, cause: unknown);
+}
+/**
+ * Sites failed to release or to answer. Every site is attempted before this
+ * is thrown, so one broken site does not keep the others back — but the run
+ * fails, and what failed is rolled back.
+ */
+export declare class FrontendDeployFailed extends Error {
+  readonly apps: readonly string[];
+  constructor(apps: readonly string[], cause: unknown);
+}
+/** An app's environment needs values the stage does not have. */
+export declare class MissingEnvVars extends Error {
+  readonly app: string;
+  readonly missing: readonly string[];
+  readonly stage: string;
+  constructor(app: string, missing: readonly string[], stage: string);
+}
+//#endregion
+//#region src/target/dokploy/health.d.ts
+/** An app never answered healthy enough times in a row. */
+export declare class HealthCheckTimedOut extends Error {
+  readonly app: string;
+  readonly url: string;
+  readonly timeoutMs: number;
+  /** The last answer's status, or undefined when the last request failed. */
+  readonly lastStatus: number | undefined;
+  constructor(app: string, url: string, timeoutMs: number,
+  /** The last answer's status, or undefined when the last request failed. */
+  lastStatus: number | undefined);
+}
+//#endregion
+//#region src/target/dokploy/migrations.d.ts
+/** The migrations of a deployed stage failed; the release stopped before any app. */
+export declare class DeployMigrationsFailed extends Error {
+  readonly stage: string;
+  /** The failure's class name in the sandbox — `MigrationFailed`, … */
+  readonly reason: string;
+  constructor(stage: string,
+  /** The failure's class name in the sandbox — `MigrationFailed`, … */
+  reason: string, message: string);
+}
+//#endregion
+//#region src/target/dokploy/rollback.d.ts
+interface RollbackInput {
+  /** The project: the directory holding `gkm.config.ts`, or one inside it. */
+  cwd: string;
+  stage: string;
+  /** The app to roll back. */
+  app?: string;
+  /** Every app with an earlier release, instead of one. */
+  atomic?: boolean;
+  /** Defaults to the environment, then the logins `gkm login` stored. */
+  credentials?: CredentialProvider;
+  signal?: AbortSignal;
+  /** Each progress line. Defaults to none. */
+  log?: (line: string) => void;
+  /** Where the config is loaded. Defaults to a `LocalSandbox` on the project. */
+  sandbox?: Sandbox;
+}
+/** One app rolled back. */
+interface RolledBack {
+  app: string;
+  from: ReleasedImage;
+  to: ReleasedImage;
+}
+/** Neither an app nor every app was asked for. */
+export declare class RollbackNeedsApp extends Error {
+  readonly stage: string;
+  /** The apps that have a release to go back to. */
+  readonly apps: readonly string[];
+  constructor(stage: string,
+  /** The apps that have a release to go back to. */
+  apps: readonly string[]);
+}
+/** An app has no release before the one it runs. */
+export declare class NothingToRollBack extends Error {
+  readonly stage: string;
+  readonly app: string;
+  constructor(stage: string, app: string);
+}
+/** The stage was never deployed through Dokploy from this state. */
+export declare class StageNeverDeployed extends Error {
+  readonly stage: string;
+  constructor(stage: string);
+}
+/**
+ * Roll a stage's app — or, `atomic`, all of them — back to its previous
+ * release, holding the stage's lock as a deploy does.
+ */
+export declare function rollbackStage(input: RollbackInput): Promise<RolledBack[]>;
+//#endregion
 //#region src/target/sst/health.d.ts
 /** Surfaces that never answered healthy. */
 export declare class SurfacesUnhealthy extends Error {
@@ -241,7 +366,10 @@ interface DeployInput {
    * directory inside it. Never assumed to be `process.cwd()`.
    */
   cwd: string;
-  /** The stage to deploy — one of the config's deployed stages. */
+  /**
+   * The stage to deploy — one of the config's deployed stages, or its local
+   * stage through a target that runs one (`compose`).
+   */
   stage: string;
   /**
    * The target to deploy through, by name. Defaults to `deploy.default`,
@@ -264,6 +392,12 @@ interface DeployInput {
    * changing Dokploy or building and pushing images.
    */
   dryRun?: boolean;
+  /**
+   * When a release or its verification fails, roll back every app the run
+   * released rather than only the ones that failed — on a target that can
+   * roll back. For apps that must move together.
+   */
+  atomic?: boolean;
   /**
    * Where credentials come from. Defaults to the environment, then the
    * logins `gkm login` stored. A credential no provider has stops the run
@@ -328,20 +462,6 @@ interface DeployRun extends AsyncIterable<DeployEvent> {
  */
 export declare function deploy(input: DeployInput): DeployRun;
 //#endregion
-//#region src/deploy/index.d.ts
-/** A backend failed, so the run stopped before deploying anything after it. */
-export declare class BackendDeployFailed extends Error {
-  readonly app: string;
-  constructor(app: string, cause: unknown);
-}
-/** An app's environment needs values the stage does not have. */
-export declare class MissingEnvVars extends Error {
-  readonly app: string;
-  readonly missing: readonly string[];
-  readonly stage: string;
-  constructor(app: string, missing: readonly string[], stage: string);
-}
-//#endregion
 //#region src/deploy/orchestrate.d.ts
 /** Apps were asked for by name that the workspace does not have. */
 export declare class UnknownDeployApps extends Error {
@@ -399,5 +519,5 @@ export declare class RegistryAmbiguous extends Error {
   constructor(registry: string, registryIds: readonly string[]);
 }
 //#endregion
-export { type AppDeployResult, type AwsCredential, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, type Credential, type CredentialKind, type CredentialKinds, type CredentialProvider, type CredentialRequest, type DeployEvent, type DeployEventError, type DeployEventType, type DeployIdentity, type DeployInput, type DeployLogger, type DeployPhase, type DeployResult, type DeployRun, DeployTargetNotYetSupported, type InstallOptions, InvalidTargetOptions, type LocalSandboxOptions, MissingCredential, ProviderRemoved, type ResourceChange, type ResourceVia, SECRETS_DIR_ENV, type Sandbox, SandboxCwdEscape, type SandboxExecOptions, type SandboxOutput, type SandboxResult, SecretNameInvalid, StateLocked, StateVersionConflict, type StoredCredentialsOptions, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployTarget, chainCredentials, confineCwd, deployIdentity, storedCredentials };
+export { type AppDeployResult, type AwsCredential, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, type Credential, type CredentialKind, type CredentialKinds, type CredentialProvider, type CredentialRequest, type DeployEvent, type DeployEventError, type DeployEventType, type DeployIdentity, type DeployInput, type DeployLogger, type DeployPhase, type DeployResult, type DeployRun, DeployTargetNotYetSupported, type InstallOptions, InvalidTargetOptions, type LocalSandboxOptions, MissingCredential, ProviderRemoved, type ResourceChange, type ResourceVia, type RollbackInput, type RolledBack, SECRETS_DIR_ENV, type Sandbox, SandboxCwdEscape, type SandboxExecOptions, type SandboxOutput, type SandboxResult, SecretNameInvalid, StateLocked, StateVersionConflict, type StoredCredentialsOptions, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployTarget, chainCredentials, confineCwd, deployIdentity, storedCredentials };
 //# sourceMappingURL=public.d.mts.map

package/dist/deploy/public.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"public.d.mts","names":[],"sources":["../../src/home.ts","../../src/run.ts","../../src/sandbox/env.ts","../../src/docker/templates.ts","../../src/sandbox/install.ts","../../src/sandbox/local.ts","../../src/sandbox/worker.ts","../../src/target/sst/health.ts","../../src/target/sst/outputs.ts","../../src/target/sst/index.ts","../../src/deploy/deploy.ts","../../src/deploy/index.ts","../../src/deploy/orchestrate.ts","../../src/deploy/ownership.ts","../../src/deploy/registry.ts"],"mappings":";;;;;;;;;;;;;;;;;qBAaa;;wBAGG,QAAQ,MAAK,OAAO;;;;qBCuBvB,sBAAsB;WAExB;WACA;WACA;WACA,QAAQ,OAAO;EAJzB,YACU,iBACA,yBACA,yBACA,QAAQ,OAAO;;;qBAUb,wBAAwB;WAE1B;WACA;WACA;EAHV,YACU,iBACA,yBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBC3BE,0CAA0C;;;;;wBAyDvC,eACf,SAAQ,OAAO,YACf,4BACE;;;KCvFS;;;;qBCeC;UAEI;;EAEhB;;EAEA,iBAAiB;;;;;;;EAOjB;;;;;EAKA;;EAEA,MAAM,SAAS;;EAEf;;EAEA,SAAS;EACT,SAAS;;;qBAIG,oCAAoC;WAC3B;EAArB,YAAqB;;;qBAWT,2CAA2C;WAE7C;WACA;EAFV,YACU,wBACA;;;;;;;;;;;;;;;;;;;;wBAqJW,oBACrB,SAAS,SACT,UAAS,iBACP,QAAQ;;;UCpMM;;EAEhB;;;;;;;;;EASA;;;;;EAKA;;EAEA,UAAU,OAAO;;;;;;;;;;;;;;;;;qBA0BL,wBAAwB;WAC3B;WACA;WACA,KAAK,SAAS;EAEvB,YAAY,SAAS;EAUf,KACL,iBACA,yBACA,SAAS,qBACP,QAAQ;;;;;qBCpBC,4BAA4B;WAE9B;WACA;WACA;EAHV,YACU,cACA,yBACA;;;;;qBC1CE,0BAA0B;WAE5B;;WAEA;IACR;IACA;IACA;IACA;;EAPF,YACU,eAEA;;EAAA;IACR;IACA;IACA;IACA;;;;;;qBCZU,6BAA6B;WAE/B;WACA;EAFV,YACU,cACA;;;;;qBC2BE,0BAA0B;WACjB;EAArB,YAAqB;;;;;;;;UCpBL;EAChB,KAAK;EACL,KAAK;EACL,OAAO;;UAGS;;;;;EAKhB;;EAEA;;;;;EAKA;;;;;;EAMA,UAAU,eAAe;;EAEzB;;EAEA;;;;;;EAMA;;;;;;EAMA,cAAc;;EAEd,SAAS;;;;;;EAMT,SAAS;;;;;EAKT;;;;;EAKA;;;;;;;;;;;;EAYA,UAAU;;;UAIM,kBAAkB,cAAc;;;;;;WAMvC,QAAQ,QAAQ;;;;;;;;;;;;;;;;;;wBAqEV,OAAO,OAAO,cAAc;;;;qBCuU/B,4BAA4B;WAE9B;EADV,YACU,aACT;;;qBAWW,uBAAuB;WAEzB;WACA;WACA;EAHV,YACU,aACA,4BACA;;;;;qBCvcE,0BAA0B;WAE5B;WACA;EAFV,YACU,yBACA;;;qBAWE,yBAAyB;WAE3B;WACA;EAFV,YACU,eACA;;;qBAUE,uBAAuB;WAEzB;;WAEA;EAHV,YACU,gBAEA;;EAAA,kBACT;;;;;;;;qBC1EW,wBAAwB;WAE1B;WACA;WACA;;WAEA;EALV,YACU,qBACA,mBACA,kBAEA;;EAAA;;;;;qBChBE,8BAA8B;WACrB;EAArB,YAAqB;;;qBAUT,yBAAyB;WAChB;EAArB,YAAqB;;;qBAUT,0BAA0B;WAE5B;WACA;EAFV,YACU,kBACA"}
+{"version":3,"file":"public.d.mts","names":[],"sources":["../../src/home.ts","../../src/run.ts","../../src/sandbox/env.ts","../../src/docker/templates.ts","../../src/sandbox/install.ts","../../src/sandbox/local.ts","../../src/sandbox/worker.ts","../../src/target/dokploy/dokploy-api.ts","../../src/target/dokploy/engine.ts","../../src/target/dokploy/health.ts","../../src/target/dokploy/migrations.ts","../../src/target/dokploy/rollback.ts","../../src/target/sst/health.ts","../../src/target/sst/outputs.ts","../../src/target/sst/index.ts","../../src/deploy/deploy.ts","../../src/deploy/orchestrate.ts","../../src/deploy/ownership.ts","../../src/deploy/registry.ts"],"mappings":";;;;;;;;;;;;;;;;;;qBAaa;;wBAGG,QAAQ,MAAK,OAAO;;;;qBCuBvB,sBAAsB;WAExB;WACA;WACA;WACA,QAAQ,OAAO;EAJzB,YACU,iBACA,yBACA,yBACA,QAAQ,OAAO;;;qBAUb,wBAAwB;WAE1B;WACA;WACA;EAHV,YACU,iBACA,yBACA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;qBC3BE,0CAA0C;;;;;wBAyDvC,eACf,SAAQ,OAAO,YACf,4BACE;;;KCvFS;;;;qBCeC;UAEI;;EAEhB;;EAEA,iBAAiB;;;;;;;EAOjB;;;;;EAKA;;EAEA,MAAM,SAAS;;EAEf;;EAEA,SAAS;EACT,SAAS;;;qBAIG,oCAAoC;WAC3B;EAArB,YAAqB;;;qBAWT,2CAA2C;WAE7C;WACA;EAFV,YACU,wBACA;;;;;;;;;;;;;;;;;;;;wBAqJW,oBACrB,SAAS,SACT,UAAS,iBACP,QAAQ;;;UCpMM;;EAEhB;;;;;;;;;EASA;;;;;EAKA;;EAEA,UAAU,OAAO;;;;;;;;;;;;;;;;;qBA0BL,wBAAwB;WAC3B;WACA;WACA,KAAK,SAAS;EAEvB,YAAY,SAAS;EAUf,KACL,iBACA,yBACA,SAAS,qBACP,QAAQ;;;;;qBCpBC,4BAA4B;WAE9B;WACA;WACA;EAHV,YACU,cACA,yBACA;;;;;qBCqBE,yBAAyB;WAE3B;WACA,YAAY;EAFtB,YACU,uBACA,YAAY;;;qBAYV,2BAA2B;WAE7B;WACA;;WAEA,YAAY;EAJtB,YACU,uBACA,mBAEA;;EAAA,YAAY;;KA0vCX;;UAOK;EAChB;EACA,QAAQ;;EAER;EACA;EACA;;;;;qBCtqCY,4BAA4B;WAE9B;EADV,YACU,aACT;;;;;;;qBAeW,6BAA6B;WAE/B;EADV,YACU,yBACT;;;qBAWW,uBAAuB;WAEzB;WACA;WACA;EAHV,YACU,aACA,4BACA;;;;;qBChNE,4BAA4B;WAE9B;WACA;WACA;;WAEA;EALV,YACU,aACA,aACA,mBAEA;;EAAA;;;;;qBCLE,+BAA+B;WAEjC;;WAEA;EAHV,YACU,eAEA;;EAAA,gBACT;;;;UCJe;;EAEhB;EACA;;EAEA;;EAEA;;EAEA,cAAc;EACd,SAAS;;EAET,OAAO;;EAEP,UAAU;;;UAIM;EAChB;EACA,MAAM;EACN,IAAI;;;qBAIQ,yBAAyB;WAE3B;;WAEA;EAHV,YACU,eAEA;;EAAA;;;qBAWE,0BAA0B;WAE5B;WACA;EAFV,YACU,eACA;;;qBAWE,2BAA2B;WAClB;EAArB,YAAqB;;;;;;wBAaA,cACrB,OAAO,gBACL,QAAQ;;;;qBChFE,0BAA0B;WAE5B;;WAEA;IACR;IACA;IACA;IACA;;EAPF,YACU,eAEA;;EAAA;IACR;IACA;IACA;IACA;;;;;;qBCZU,6BAA6B;WAE/B;WACA;EAFV,YACU,cACA;;;;;qBC2BE,0BAA0B;WACjB;EAArB,YAAqB;;;;;;;;UCrBL;EAChB,KAAK;EACL,KAAK;EACL,OAAO;;UAGS;;;;;EAKhB;;;;;EAKA;;;;;EAKA;;;;;;EAMA,UAAU,eAAe;;EAEzB;;EAEA;;;;;;EAMA;;;;;;EAMA;;;;;;EAMA,cAAc;;EAEd,SAAS;;;;;;EAMT,SAAS;;;;;EAKT;;;;;EAKA;;;;;;;;;;;;EAYA,UAAU;;;UAIM,kBAAkB,cAAc;;;;;;WAMvC,QAAQ,QAAQ;;;;;;;;;;;;;;;;;;wBAqEV,OAAO,OAAO,cAAc;;;;qBCnH/B,0BAA0B;WAE5B;WACA;EAFV,YACU,yBACA;;;qBAWE,yBAAyB;WAE3B;WACA;EAFV,YACU,eACA;;;qBAUE,uBAAuB;WAEzB;;WAEA;EAHV,YACU,gBAEA;;EAAA,kBACT;;;;;;;;qBC7EW,wBAAwB;WAE1B;WACA;WACA;;WAEA;EALV,YACU,qBACA,mBACA,kBAEA;;EAAA;;;;;qBChBE,8BAA8B;WACrB;EAArB,YAAqB;;;qBAUT,yBAAyB;WAChB;EAArB,YAAqB;;;qBAUT,0BAA0B;WAE5B;WACA;EAFV,YACU,kBACA"}

package/dist/deploy/public.mjs

@@ -1,17 +1,17 @@
-import { M as StateVersionConflict, k as StateLocked, u as detectPackageManager } from "../sniffer-49KPbDgq.mjs";
-import { a as CommandTimedOut, i as CommandFailed, n as SANDBOX_ENV_ALLOWLIST, r as allowlistedEnv, t as LocalSandbox, v as GKM_HOME_ENV, y as gkmHome } from "../local-Cd8ZYQG3.mjs";
-import { n as ConstructsNotSerializable, o as SandboxWorkerFailed, t as ConstructDiscoveryFailed } from "../discover-LMrqsWSU.mjs";
+import { a as CommandTimedOut, i as CommandFailed, l as GKM_HOME_ENV, n as SANDBOX_ENV_ALLOWLIST, r as allowlistedEnv, t as LocalSandbox, u as gkmHome } from "../local-CWR4Y_kW.mjs";
+import { n as chainCredentials, r as storedCredentials, t as MissingCredential } from "../credentials-Dq1MnWQf.mjs";
+import { n as ConstructsNotSerializable, o as SandboxWorkerFailed, t as ConstructDiscoveryFailed } from "../discover-BFoJWKGD.mjs";
 import { n as SandboxCwdEscape, o as confineCwd, r as SecretNameInvalid, t as SECRETS_DIR_ENV } from "../sandbox-Dm247NGx.mjs";
-import { a as UnknownDeployTarget, i as DeployTargetNotYetSupported } from "../define-CYs0PEfZ.mjs";
+import { a as UnknownDeployTarget, i as DeployTargetNotYetSupported } from "../define-DR8xGYfL.mjs";
 import { ConfigLoadFailed, ConfigObjectNotSerializable } from "../config.mjs";
-import { u as deployIdentity } from "../store-BaaonhkJ.mjs";
-import { i as TargetPackageNotFound, t as TargetRuntimeUndeclared } from "../runtime-Cmn-FeYO.mjs";
-import { i as TargetRuntimeMismatch, n as TargetEntryInvalid, r as TargetPackageInvalid, s as ProviderRemoved, t as InvalidTargetOptions } from "../resolve-DZ2IJ0qY.mjs";
-import { n as chainCredentials, r as storedCredentials, t as MissingCredential } from "../credentials-s0wMeZBU.mjs";
-import { i as SurfacesUnhealthy, r as SstOutputsUnreadable, t as SstConfigNotFound } from "../sst-Cper040I.mjs";
-import { i as UnknownDeployApps, n as NoDeployableApps, r as RollbackFailed } from "../terminal-D7Ntz6WE.mjs";
-import { t as deploy } from "../deploy-Dc2LBJaK.mjs";
-import { d as RegistryNotFound, f as ProjectNotOwned, l as RegistryAmbiguous, n as MissingEnvVars, t as BackendDeployFailed, u as RegistryNotConfigured } from "../deploy-ZRXIPp1c.mjs";
+import { b as detectPackageManager, yt as deployIdentity } from "../state-uuYqnRVO.mjs";
+import { a as DeploymentTimedOut, d as StateLocked, i as DeploymentFailed, m as StateVersionConflict } from "../sniffer-BAQhLEsI.mjs";
+import { i as TargetRuntimeMismatch, l as TargetPackageNotFound, n as TargetEntryInvalid, r as TargetPackageInvalid, s as TargetRuntimeUndeclared, t as InvalidTargetOptions } from "../resolve-Db0tNlrW.mjs";
+import { i as UnknownDeployApps, n as NoDeployableApps, r as RollbackFailed, t as deploy } from "../deploy-DWn7YfIc.mjs";
+import { _ as RegistryNotConfigured, g as RegistryAmbiguous, h as HealthCheckTimedOut, m as DeployMigrationsFailed, n as FrontendDeployFailed, r as MissingEnvVars, t as BackendDeployFailed, v as RegistryNotFound, y as ProjectNotOwned } from "../engine-CunvOG3s.mjs";
+import { i as rollbackStage, n as RollbackNeedsApp, r as StageNeverDeployed, t as NothingToRollBack } from "../rollback-DvAo4OKS.mjs";
+import { t as ProviderRemoved } from "../provider-q4lsYzYG.mjs";
+import { i as SurfacesUnhealthy, r as SstOutputsUnreadable, t as SstConfigNotFound } from "../sst-B2HbrDR3.mjs";
 import { join, resolve } from "node:path";
 import { existsSync } from "node:fs";
 //#region src/sandbox/install.ts
@@ -136,6 +136,6 @@ async function installDependencies(sandbox, options = {}) {
 	return results;
 }
 //#endregion
-export { BackendDeployFailed, CommandFailed, CommandTimedOut, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, DeployTargetNotYetSupported, GKM_HOME_ENV, INSTALL_TIMEOUT_MS, InstallAllowlistNameInvalid, InstallScriptsAllowlistUnsupported, InvalidTargetOptions, LocalSandbox, MissingCredential, MissingEnvVars, NoDeployableApps, ProjectNotOwned, ProviderRemoved, RegistryAmbiguous, RegistryNotConfigured, RegistryNotFound, RollbackFailed, SANDBOX_ENV_ALLOWLIST, SECRETS_DIR_ENV, SandboxCwdEscape, SandboxWorkerFailed, SecretNameInvalid, SstConfigNotFound, SstOutputsUnreadable, StateLocked, StateVersionConflict, SurfacesUnhealthy, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployApps, UnknownDeployTarget, allowlistedEnv, chainCredentials, confineCwd, deploy, deployIdentity, gkmHome, installDependencies, storedCredentials };
+export { BackendDeployFailed, CommandFailed, CommandTimedOut, ConfigLoadFailed, ConfigObjectNotSerializable, ConstructDiscoveryFailed, ConstructsNotSerializable, DeployMigrationsFailed, DeployTargetNotYetSupported, DeploymentFailed, DeploymentTimedOut, FrontendDeployFailed, GKM_HOME_ENV, HealthCheckTimedOut, INSTALL_TIMEOUT_MS, InstallAllowlistNameInvalid, InstallScriptsAllowlistUnsupported, InvalidTargetOptions, LocalSandbox, MissingCredential, MissingEnvVars, NoDeployableApps, NothingToRollBack, ProjectNotOwned, ProviderRemoved, RegistryAmbiguous, RegistryNotConfigured, RegistryNotFound, RollbackFailed, RollbackNeedsApp, SANDBOX_ENV_ALLOWLIST, SECRETS_DIR_ENV, SandboxCwdEscape, SandboxWorkerFailed, SecretNameInvalid, SstConfigNotFound, SstOutputsUnreadable, StageNeverDeployed, StateLocked, StateVersionConflict, SurfacesUnhealthy, TargetEntryInvalid, TargetPackageInvalid, TargetPackageNotFound, TargetRuntimeMismatch, TargetRuntimeUndeclared, UnknownDeployApps, UnknownDeployTarget, allowlistedEnv, chainCredentials, confineCwd, deploy, deployIdentity, gkmHome, installDependencies, rollbackStage, storedCredentials };
 
 //# sourceMappingURL=public.mjs.map